GHSA-v67w-737x-v2c9MediumCVSS 5.9

ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds

Published
April 13, 2026
Last Modified
April 24, 2026

🔗 CVE IDs covered (1)

📋 Description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the viff encoder contains an integer truncation/wraparound issue on 32-bit builds that could trigger an out of bounds heap write, potentially causing a crash. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

🎯 Affected products6

  • nuget/Magick.NET-Q16-AnyCPU:< 14.12.0
  • nuget/Magick.NET-Q16-HDRI-AnyCPU:< 14.12.0
  • nuget/Magick.NET-Q16-HDRI-x86:< 14.12.0
  • nuget/Magick.NET-Q16-x86:< 14.12.0
  • nuget/Magick.NET-Q8-AnyCPU:< 14.12.0
  • nuget/Magick.NET-Q8-x86:< 14.12.0

🔗 References (6)